Home
Legal

Privacy Policy

How we collect, use, and protect your information.

Last updated: July 27, 2026

1. Introduction

Grid ("we," "our," or "us") is a free, open-source Platform-as-a-Service operated by SMSLYCLOUD. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Grid platform, website, and related services (collectively, the "Service").

Since Grid is self-hosted, your application data, environment variables, and deployments remain on your own infrastructure. We do not have access to your data unless you explicitly grant it.

2. Information We Collect

2.1 Information You Provide

  • Account information — When you create an admin account, we store your username, email address, and an encrypted password hash.
  • OAuth credentials — When you connect a GitHub account, we store the access token (encrypted) and basic profile information needed for repository access and webhook management.
  • Configuration data — Domain names, SSL settings, environment variables, and deployment configurations you enter through the dashboard or API.
  • Payment information — If you purchase a paid plan, payment processing is handled by our payment provider. We do not store credit card numbers on our servers.

2.2 Information Collected Automatically

  • Usage logs — API request logs, deployment history, and audit trails are stored locally on your Grid instance.
  • Container metrics — CPU, memory, and network metrics collected by the autoscaler and intelligence subsystem for scaling decisions.
  • Error reports — Build logs and deployment error reports are stored on your instance for debugging.

2.3 Information We Do NOT Collect

  • Your source code (it stays on your server or Git provider)
  • Your database contents
  • Your users' personal data
  • Environmental metrics from third-party services unless you configure them

3. How We Use Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process deployments and manage your infrastructure
  • Send important service notifications (security alerts, updates)
  • Respond to support requests
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations

4. Data Storage and Security

Your data is stored on your own infrastructure. Grid uses industry-standard security measures including:

  • Fernet encryption (AES-128-CBC) for secrets at rest
  • TLS for data in transit
  • Encrypted database fields for sensitive configuration
  • Role-based access control for the dashboard
  • Immutable audit logging for all state changes

For self-hosted instances, you are responsible for the security of your own server, including firewall configuration, access controls, and backup procedures.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specifically:

  • Account data — Retained until you delete your account
  • Deployment logs — Stored on your instance, managed by your retention settings
  • Audit logs — Immutable and retained indefinitely for compliance
  • Backups — Managed by your backup configuration

6. Data Sharing

We do not sell, trade, or otherwise transfer your information to third parties. We may share information only in the following circumstances:

  • With your consent — When you explicitly authorize sharing
  • Service providers — Third-party services you integrate with (GitHub, Cloudflare, payment processors) receive only the data necessary for their function
  • Legal requirements — When required by law, regulation, or valid legal process
  • Security — To protect the rights, property, or safety of Grid, our users, or the public

7. Third-Party Services

The Grid platform may integrate with the following third-party services:

  • GitHub — For repository access and webhook management (via GitHub App or OAuth)
  • Cloudflare — For wildcard SSL certificates (optional, via API token)
  • Let's Encrypt — For automatic SSL certificate provisioning
  • AI Providers — OpenAI, Anthropic, Google, and others (optional, admin-configured)

Each third-party integration is opt-in. No data is sent to external services unless you explicitly configure and enable the integration.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access — Request a copy of the personal data we hold about you
  • Correction — Request correction of inaccurate data
  • Deletion — Request deletion of your account and associated data
  • Portability — Request your data in a machine-readable format
  • Objection — Object to processing of your personal data

Since Grid is self-hosted, most of these rights are exercised directly on your own instance. For account-level requests, contact us at privacy@smsly.cloud.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@smsly.cloud or visit our GitHub repository.